
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier: 3wxdgwbmLLWcgCMTh69TYCCPfRn+rY3W+uqd9tQiss0=
Subject key identifier: D0:3A:02:1F:53:0F:A5:55:B7:D1:69:85:D6:26:77:71:4A:22:56:3F
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 01A12165E559D5B1C5BBFD5B43FDB64C338A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number: 0F53
Signing time: Fri 09 Oct 2026 16:01:28 +0000
Manifest this update: Fri 09 Oct 2026 16:01:28 +0000
Manifest next update: Sat 10 Oct 2026 16:01:28 +0000
Files and hashes: 1: 1-nCQN0VaQ2ael-H6q4WDuaNQ3YY.asa (hash: KIdLVAXXfbqG6AUAL9K0nR+wv3qEFvVz82UnXZsV/e0=)
2: 4drBeY0WR_A1GPJtZA4YXlykfh4.roa (hash: uPxG8eo/1XvDANn6qBOuvVB20xa9nluualatLIHzSnQ=)
3: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: VqY/ub+c2ACYGlnOeFz6xzA9i3xmitGeCrXWO53nwD4=)
4: 7uHJu7In6geY62mGLWsA-BkgXxQ.roa (hash: pCDrNYSeQf8254wV63If3iDd+pDCOI3GCLUFpM1rWQ4=)
5: BoeMKNwlhEwpOy1dRFh8Q6mpryA.roa (hash: hmgm/Pnh2iZKFyyt03L0VwIKzZWIKaWyCr/JtLV+SZ0=)
6: FWeLMrqzdI4hd96orsYQfK_d0Zc.roa (hash: /u234PjKVouqOKntVh4TgCtWCyFv7L7LbMqlU2f96A4=)
7: OpTtVKAksYNEjp3sCGLjB77TEtQ.roa (hash: CAYkdDo7AOeXQO9VIZQbkqyLJ0Mm55TJfWGJgk3xupc=)
8: d9wb1eF6Kgr5egZh0GmYzM3mWyU.roa (hash: j4UwBax/dxRdEVE/m/yu7Cwiok31VxQpLQtQWVklMoM=)
9: m_98aREObyeD712Ey5gRbDiZuLo.roa (hash: O+Oki3q+yMkC01ENxqqfabIW79L+GAIiTNddxHZ4sdw=)
10: o0nlrJylYIGYsWBjRFGVnG7mqFk.roa (hash: ytLMden+iVQSZ4MVhXxgpNGbvtp5EMg2V51G3jlU0Tc=)
11: qEsk61krs4UNghsWKgM1rpZTsAA.roa (hash: zR7J3cxzeRnLNGTYl/CdMoo52lC6GVsx4Ud+EzU7nAE=)
12: qaVO4z7HM3tbkG5gEvMn68wSuWU.asa (hash: JAi0GABFFurEvBhUtWlfXnuuHV8d7a+Pj2wZEVd8Pus=)
13: uFDhrp45x2S15YuMbH58dJYEMFI.asa (hash: AUBNykXKGbFKhvh9Mvpa3SOfRAcYIzZmiYje8ZwFI3k=)
14: xSo_S4mp4KylJ282tG2KBfx1kB4.roa (hash: y6cL2LAD2UaFnNZj8A3tj8qtOaCatFdh20b64QN2mxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:65:e5:59:d5:b1:c5:bb:fd:5b:43:fd:b6:4c:33:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Oct 9 16:01:28 2026 GMT
Not After : Oct 10 16:01:28 2026 GMT
Subject: CN=d03a021f530fa555b7d16985d62677714a22563f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:c3:1b:b1:a6:a9:1b:73:2a:51:69:fc:94:
3b:c6:3f:37:4e:d4:a3:e3:78:60:33:f9:f4:96:d5:
25:82:45:4e:1a:be:5e:d7:56:e4:e6:77:b4:75:39:
a3:62:48:0a:1c:78:1c:a6:33:dd:6c:33:17:47:09:
ce:87:45:26:b5:bd:50:d5:8f:05:5c:86:f4:ca:2f:
20:68:95:45:b0:1b:08:00:0e:49:be:c0:39:ea:b0:
2d:92:48:80:61:5b:d3:86:a5:17:f0:dd:bd:12:e0:
ae:89:f1:5d:0b:6f:5a:36:83:da:2f:48:45:51:49:
50:59:ca:fd:b1:0a:4a:16:38:0d:72:9a:83:f3:05:
aa:55:a6:4c:2f:4b:b9:e7:db:2d:12:09:e2:af:d2:
2d:06:f6:c4:1b:92:17:2f:eb:05:2c:1b:c7:33:41:
87:66:47:dd:a6:20:4b:8d:c3:e6:87:49:dd:8e:63:
fd:38:0c:33:63:e3:f8:b4:ac:34:d4:d2:49:b6:59:
c7:09:41:0d:33:65:f8:77:9a:67:de:3a:35:e2:c5:
fb:db:05:05:ce:e6:57:15:f6:de:78:65:5c:1f:1d:
0d:6c:4d:b7:f0:a5:d6:38:6f:2e:b9:80:77:fc:05:
5f:79:69:f7:b9:71:14:cb:c8:2c:4d:65:f6:a3:17:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3A:02:1F:53:0F:A5:55:B7:D1:69:85:D6:26:77:71:4A:22:56:3F
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6c:51:31:b2:a8:48:e2:48:6c:dd:ab:34:92:15:44:0e:2e:
51:08:41:ee:47:e8:24:4a:42:f1:25:bb:5d:75:35:50:1c:c7:
bd:67:4e:45:a2:3d:43:9c:6c:31:01:2d:7b:2c:c3:0b:d1:14:
65:7e:c2:52:cf:64:6f:45:7c:7c:a5:ea:32:52:ad:d8:b0:09:
31:6f:17:7f:55:6d:6f:29:0d:c7:59:61:c0:0c:17:f5:2f:3e:
7f:39:54:97:8f:be:20:28:37:0f:f7:a3:fe:a9:33:6c:14:9a:
38:28:4f:68:16:d7:97:b2:6c:21:54:de:3e:cb:17:53:48:7b:
13:72:4e:49:09:12:0a:11:b8:7b:c5:70:69:a1:65:a0:67:33:
37:1b:94:57:23:d1:5a:f3:de:55:4d:bc:db:54:3e:e9:17:9d:
09:fa:bb:c0:fc:1d:98:f8:9d:b5:d5:a8:b9:b1:2b:a4:30:57:
2d:29:99:3f:1b:ce:97:ba:1d:f7:45:05:82:a8:fd:ed:72:c7:
29:fe:d7:08:1b:77:26:28:9d:56:7d:02:b6:f8:d8:0a:53:35:
25:c8:57:13:78:5f:4b:78:71:22:0d:9b:96:dc:9d:ef:80:c7:
c8:21:f6:df:f8:ae:1b:b5:6d:b9:16:ed:45:d1:6b:8d:82:53:
31:61:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:35:36 2026 by rpki-client